An emergency out-of-band update for patching the critical LNK vulnerability has been released by Microsoft. "The vulnerability exists because Windows incorrectly parses shortcuts in such a way that malicious code may be executed when the operating system displays the icon of a malicious shortcut file," it says in the security bulletin.